chore: bump CLI/MCP tool versions (Claude Code 2.1.126, Copilot 1.0.39, Codex 0.128.0, Playwright MCP 0.0.72, MCP Gateway v0.3.3) by Copilot · Pull Request #29484 · github/gh-aw

Copilot · 2026-05-01T09:12:59Z

Routine version bumps for 5 CLI/MCP tools. Notable: MCP Gateway v0.3.3 includes a critical session timeout fix (default 6h instead of 30min), directly improving long-running workflow reliability.

Version changes

Tool	Previous	New
Claude Code	2.1.119	2.1.126
GitHub Copilot CLI	1.0.36	1.0.39
OpenAI Codex	0.125.0	0.128.0
Playwright MCP	0.0.70	0.0.72
MCP Gateway	v0.3.1	v0.3.3

Files changed

pkg/constants/version_constants.go — updated 5 version constants
.github/workflows/*.lock.yml — all 205 workflow lock files recompiled
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/*.golden — WASM golden snapshots updated to reflect new versions

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh gh repo view --json owner,name --jq .owner.login + "/" + .name ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu-buildtags (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu-tests (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw b/gh-aw/tmp GOMODCACHE 64/pkg/tool/linutest@example.com 3237�� DMg6/cTqK_V6uGbCXAe_-DMg6 pkg/mod/github.com/goccy/go-yaml@v1.19.2/internal/format/format.go ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -p crypto/internal//tmp/test-import-2434897923.js -lang=go1.25 ache/go/1.25.8/x64/pkg/tool/linutest@example.com (http block)
https://api.github.com/orgs/test-owner/actions/secrets
- Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD ys_wasm.s x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name e=false git /usr/bin/git --show-toplevel %H %ct %D (http block)
https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv xterm-color 64/pkg/tool/linutest@example.com /usr/bin/git 472174560 8097120/b032/vetrev-parse x_amd64/link git rev-�� --show-toplevel x_amd64/link /usr/bin/git t644947328/.githnode 8097120/b104/vet/opt/hostedtoolcache/node/24.14.1/x64/bin/npm ache/go/1.25.8/xinstall git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv add remote2 ps y_with_explicit_git rev-parse 64/pkg/tool/linu--show-toplevel ps git git 64/pkg/tool/linux_amd64/vet /usr/bin/git 073077/b001/work/usr/lib/systemd/systemd-executor rev-parse 1/x64/bin/node git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv --show-toplevel x_amd64/vet /usr/bin/git .a GO111MODULE x_amd64/vet git rev-�� --show-toplevel x_amd64/vet /usr/bin/git .a rotocol/go-sdk@vrev-parse x_amd64/vet git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/git w/js/**/*.json' git git repository(owne--show-toplevel git rev-�� --show-toplevel n_pins.json; \ echo "�� Action pins synced sucshow /usr/bin/git k/gh-aw/gh-aw/.ggit git /usr/bin/git git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v5
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv 2531-34634/test-.artifacts[].name -trimpath es -p encoding/pem -lang=go1.25 /opt/hostedtoolcache/go/1.25.8/xTest User -uns�� 2531-34634/test-3142950442/.github/workflows /tmp/go-build2378097120/b044/vet.cfg 1/x64/bin/node -goversion go1.25.8 -c=4 /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv --show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /usr/bin/git /tmp/go-build376git -trimpath iptables git rev-�� --show-toplevel /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /usr/bin/git -unreachable=falgit /tmp/go-build237rev-parse 8097120/b296/vet--show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git /tmp/TestGuardPogit rev-parse /opt/hostedtoolc--show-toplevel git rev-�� --show-toplevel node /usr/bin/git /tmp/TestHashCongit l /usr/bin/git git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv -unreachable=false /tmp/go-build2378097120/b221/vet.cfg /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linu-lang=go1.25 =receive GO111MODULE 64/bin/go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv ithub-script/git/ref/tags/v9 security "warnings":[]}] -nxv GO111MODULE x_amd64/compile git-upload-pack /tmp�� GOMODCACHE x_amd64/compile 1/x64/bin/node -json GO111MODULE x_amd64/compile git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv image:v1.0.0 x_amd64/compile /usr/bin/git -json GO111MODULE x_amd64/compile git -C /tmp/compile-all-instructions-test-960044210/.github/workflows s/3/artifacts /usr/bin/git -json GO111MODULE x_amd64/vet git (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v8
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv --show-toplevel 64/pkg/tool/linux_amd64/link /usr/bin/git ingutil.test /tmp/go-build237status ortcfg.link git rev-�� --show-toplevel WSXRyBZ2GEm4H7IUTM/LO7H8yrdtF7RvFVPrIMI/Ghy3DT33Rik9SPHCtMYQ /usr/bin/git '/tmp/TestParseDgit '/tmp/TestParseDrev-parse g_.a git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv --show-toplevel git e/git /home/REDACTED/worgit rev-parse 1/x64/bin/node e/git rev-�� --show-toplevel om/github/gh-aw.git /usr/bin/git ithub/workflows/git --write /bin/sh git (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v9
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv -json /unsafebytes/uns-c=4 x_amd64/asm GOINSECURE GOMOD GOMODCACHE x_amd64/asm env -json eyset.go x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/asm GOINSECURE GOMOD GOMODCACHE x_amd64/asm env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --get remote.origin.url /usr/lib/git-core/git tcfg .cfg 64/pkg/tool/linu--show-toplevel /usr/lib/git-core/git remo�� REDACTED REDACTED /usr/bin/git 32372/b240/_pkg_git GO111MODULE ache/go/1.25.8/x--show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git '**/*.ts' '**/*.gh rev-parse /usr/bin/infocmpview git remo�� add origin /usr/bin/git .js' --ignore-pagit git ode git (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /tmp/compile-all-instructions-test-960044210 s/1/artifacts /usr/bin/git -json GO111MODULE x_amd64/vet git rev-�� --show-toplevel x_amd64/vet /usr/bin/docker from .github/aw git GO111MODULE x_amd64/vet docker (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel 64/pkg/tool/linuTest User /usr/bin/infocmp LsRemoteWithRealgit LsRemoteWithRealrev-parse 64/pkg/tool/linu--show-toplevel infocmp -1 xterm-color 64/pkg/tool/linuupstream /usr/bin/git 438554/001 28ie/dWadUuI3oiBrev-parse At,event,headBra--show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv run --auto /usr/bin/git --detach git /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git k/gh-aw/gh-aw/.ggit git /usr/bin/git git (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv -unreachable=false /tmp/go-build2378097120/b223/vet.cfg /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linu-lang=go1.25 -json GO111MODULE 64/bin/go /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linuremote1 -uns�� -unreachable=false /tmp/go-build2378097120/b368/vet.cfg 1/x64/bin/node -json GO111MODULE 64/bin/go git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv -t security (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv sistency_KeyOrdering1545055701/001/test1.md remote.origin.url /usr/bin/git -json (http block)
https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv ry=1 x_amd64/compile 8097120/b459/_pkg_.a -json 1.5.0/mcp/clientrev-parse x_amd64/compile git -C /tmp/gh-aw-test-runs/20260501-092531-34634/test-369090767/custom/workflows rev-parse /usr/bin/git -json GO111MODULE x_amd64/vet git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /tmp/TestHashConsistency_GoAndJavaScript2498937271/001/test-frontmatter-with-env-template-expresgh git /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git h ../../../.pretgit git r.lock.yml git (http block)
https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
- Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git --show-toplevel hanges) /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git -2634170391/base/usr/bin/gh -2634170391/new.api er: String!, $nagraphql git (http block)
- Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git runs/20260501-09git x_amd64/link /usr/bin/git git runs�� --show-toplevel git /usr/bin/git --show-toplevel nF/2rw-RdHCw_apH-C /usr/bin/git git (http block)
https://api.github.com/repos/github/gh-aw
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw --jq .default_branch --show-toplevel git /usr/bin/git --show-toplevel /opt/hostedtoolc-1 /usr/bin/git git rev-�� h-imports) git repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } --show-toplevel /opt/hostedtoolc-C /usr/bin/git git (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.1.2
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv GOMODCACHE 8n/W7nDXlF-2wrJGrRo2mzy/Er_eZaAbconfig /usr/bin/git tcfg GO111MODULE 64/pkg/tool/linu--show-toplevel git rev-�� --show-toplevel 64/pkg/tool/linux_amd64/vet /usr/bin/git mpiledOutput2117git GO111MODULE .cfg git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv user.email test@example.com /usr/bin/git xterm-color git 86_64/sh git rev-�� --show-toplevel git /usr/bin/git .js' --ignore-pagit rev-parse de_modules/.bin/--show-toplevel git (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv /tmp/TestGuardPolicyBlockedUsersCommaSeparatedCompiledOutput2780-c=4 config clusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle remote.origin.urgit GO111MODULE x_amd64/compile git -C /home/REDACTED/work/gh-aw/gh-aw rev-parse r,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,disp--show-toplevel -json GO111MODULE x_amd64/vet git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv --show-toplevel -tests /usr/bin/git ithub/workflows git /usr/bin/git git -C /tmp/gh-aw-test-runs/20260501-092722-44043/test-2070498244/.github/workflows rev-parse /usr/bin/git h ../../../.pretgit rk me: String!) { --show-toplevel git (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.2.3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv --show-toplevel x_amd64/compile /opt/hostedtoolcache/node/24.14.1/x64/bin/node -json GO111MODULE 64/bin/go node /tmp�� /tmp/TestHashConsistency_GoAndJavaScript2618041181/001/test-frontmatter-with-nested-objects.md resolved$ /usr/bin/git -json GO111MODULE x_amd64/vet git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv k/gh-aw/gh-aw/.github/workflows --jq /usr/bin/git github/workflowsgit git repository(owne--show-toplevel git -C /tmp/gh-aw-test-runs/20260501-092722-44043/test-2070498244/.github/workflows remote /usr/bin/git h ../../../.pretgit git grep-scan.lock.y--show-toplevel git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-04-24 GOMOD GOMODCACHE 64/pkg/tool/linutest@example.com tcfg�� -json .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE 32372/b047/ GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-04-01 setup/js/node_moinit is 64/pkg/tool/linux_amd64/vet env dfWiE9R6S .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE 32372/b087/ GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-01-31 GOMOD GOMODCACHE 64/pkg/tool/linuremote.origin.url tcfg�� ned-imports-enabled-with-env-template-expressions-in-body.md .cfg x_amd64/link GOINSECURE b/gh-aw/pkg/tty GOMODCACHE x_amd64/link (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name g-gh/tcTLxKIFRze8kq6Gg-gh ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE fips140/nistec GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 i2Jk/kxQktkbJrdZm0O72i2Jk .cfg GOINSECURE able GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name git /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet --show-toplevel git /usr/bin/git /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -ato�� -bool -buildtags /bin/sh -errorsas -ifaceassert -nilfunc /bin/sh (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name .cfg 64/pkg/tool/linux_amd64/compile GOINSECURE 32372/b011/asm.orev-parse ache/go/1.25.8/x--show-toplevel 64/pkg/tool/linux_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE 32372/b011/sys_wrev-parse ache/go/1.25.8/x--show-toplevel 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name 64/pkg/tool/linuconfig At,event,headBranch,headSha,displayTitle --show-toplevel git /usr/bin/git sh -c "prettier" --write '../../../**/*.json' '!../../../pkg/workflow/js/**/*.json' --ignore-path ../.git git /opt/hostedtoolcache/node/24.14.1/x64/bin/node ithub/workflows git k/_temp/uv-pytho--show-toplevel node (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name .cfg x_amd64/compile GOINSECURE GOMOD 32372/b011/symab--show-toplevel x_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 GO111MODULE 64/pkg/tool/linux_amd64/link GOINSECURE fips140/edwards2rev-parse 32372/b006/symab--show-toplevel 64/pkg/tool/linux_amd64/link (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name 64/pkg/tool/linushow /home/REDACTED/work/gh-aw/gh-aw/actions/setup/js/node_modules/.bin/prettier --show-toplevel git /usr/bin/git prettier --wr�� ../../../**/*.json !../../../pkg/workflow/js/**/*.json /usr/bin/git ../../../.prettigit git stency-checker.l--show-toplevel git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name TE68/Ns65yq8CR2ZxCmVfTE68 ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/xTest User (http block)
- Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 hxms/bWOB0OjYPOs06SIChxms .cfg GOINSECURE g/x/net/http2/hprev-parse GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name git 1/x64/bin/node 01' 01' r: $owner, name:--show-toplevel 1/x64/bin/node -ato�� -bool -buildtags /usr/lib/git-core/git-upload-pack -errorsas -ifaceassert -nilfunc git-upload-pack (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name GO111MODULE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/xtest@example.com (http block)
- Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 cQ7c/qW3Yktv_0Qvh00yucQ7c .cfg GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu--jq -V=f�� 1839565391 -Eee/499QsILxkBjFfa_H-Eee .cfg GOSUMDB GOWORK 64/bin/go ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name git /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet l git repository(owne--show-toplevel /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -ato�� -bool -buildtags /usr/bin/git -errorsas -ifaceassert -nilfunc git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name TJ4J/EoB_P8I8HxwDW6KATJ4J x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 GO111MODULE .cfg GOINSECURE g/x/text/unicodeconfig GOMODCACHE ache/go/1.25.8/xtest@example.com 3237�� 1839565391/.github/workflows YknE/_O2drKQQrICaTWjRYknE .cfg GOSUMDB GOWORK 64/bin/go ache/go/1.25.8/x64/pkg/tool/linu/tmp/file-tracker-test955487107/test2.lock.yml (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name git /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet --show-toplevel git repository(owne--show-toplevel /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -ato�� -bool -buildtags ache/node/24.14.1/x64/bin/node -errorsas -ifaceassert -nilfunc /bin/sh (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name .cfg .cfg GOINSECURE GOMOD 32372/b078/symab--show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 3cxW/IBlaqeSprCJhOYFQ3cxW .cfg GOINSECURE g/x/text/secure/rev-parse GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu-trimpath (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name git /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/link --show-toplevel git /usr/bin/git /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/link -o /tmp/go-build278361628/b431/parser.test -importcfg /usr/lib/git-core/git-upload-pack -s -w -buildmode=exe git-upload-pack (http block)
https://api.github.com/repos/github/gh-aw/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE json GOMODCACHE x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 32372/b133/ GOMODCACHE 64/pkg/tool/linu--json env 8097120/b001/_pk--limit GO111MODULE ache/go/1.25.8/x--created GOINSECURE b/gh-aw/actions/rev-parse 32372/b133/symab--show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
https://api.github.com/repos/github/gh-aw/contents/.github/workflows/shared/reporting.md
- Triggering command: /tmp/go-build2378097120/b404/cli.test /tmp/go-build2378097120/b404/cli.test -test.testlogfile=/tmp/go-build2378097120/b404/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/asm GOINSECURE GOMOD GOMODCACHE x_amd64/asm (http block)
- Triggering command: /tmp/go-build278361628/b404/cli.test /tmp/go-build278361628/b404/cli.test -test.testlogfile=/tmp/go-build278361628/b404/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true --show-toplevel ortcfg ed } } git rev-�� ithub/workflows git /usr/bin/git --show-toplevel 8097120/b462/typ-c 86_64/node git (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.47.4
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /usr/bin/git se 8097120/b080/vetrev-parse ache/go/1.25.8/x--show-toplevel git rev-�� --show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile /usr/bin/git 8097120/b437/_pkdu /tmp/go-build237-k .test git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel resolved$ /usr/bin/git 2722-44043/test-git config ache/go/1.25.8/x--show-toplevel git rev-�� --show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /usr/bin/git xterm-color git e/git git (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv 81/001/test-frontmatter-with-arrays.md -trimpath .cfg -I /tmp/go-build376rev-parse -I ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv js/**/*.json' --ignore-path ../../../.prettierignore git kflows/copilot-session-insights.lock.yml --show-toplevel gh /usr/bin/git bash --no�� k/gh-aw/gh-aw/.github/workflows git /usr/bin/git --show-toplevel git DiscussionsEnabl--show-toplevel git (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.2.3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv json' --ignore-path ../../../.pr--ignore-path -s -w -X main.version=a77c4ab-di.prettierignore /usr/bin/git gh-aw ./cmd/gh-aw ed } } git ules�� ub/workflows show x_amd64/asm l e/git-remote-httinit $name) { hasDiscussionsEnabl-bool x_amd64/asm (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v2.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv -json fer.go x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env .a GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv -json at.go x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env .a GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv iant-2656436579/.github/workflows GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet 6290�� .a rotocol/go-sdk@v1.5.0/internal/j-ifaceassert x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v3.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env Gitmaster_branch2629001027/001' Gitmaster_branch2629001027/001' x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv Gitmain_branch1223278473/001' Gitmain_branch1223278473/001' ature-coverage.lock.yml l ache/node/24.14.config /usr/bin/git /usr/bin/gh api b/workflows -f x_amd64/vet l owner=github -f x_amd64/vet (http block)
https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv se 8097120/b058/vet.cfg ck -p internal/msan -lang=go1.25 ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet sRem�� se 8097120/b237/vet.cfg .cfg -p crypto/internal/rev-parse -lang=go1.25 ache/go/1.25.8/x64/pkg/tool/linuremote1 (http block)
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv k/gh-aw/gh-aw git (http block)
https://api.github.com/repos/nonexistent/repo/actions/runs/12345
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE t/internal/langurev-parse GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion -errorsas -ifaceassert -nilfunc git-receive-pack /tmp�� -stringintconv -tests /usr/bin/git .github/workflow/usr/bin/git git me: String!) { -v git (http block)
https://api.github.com/repos/owner/repo/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh workflow list --repo owner/repo --json name,path,state .cfg GOSUMDB GOWORK 64/bin/go ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo (http block)
https://api.github.com/repos/test-owner/test-repo/actions/secrets
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD reempt_wasm.s x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name ted-objects.md git ml --show-toplevel git /usr/bin/git git er --show-toplevel git t-incident-monitor.lock.yml --show-toplevel git /usr/bin/git bash (http block)
https://api.github.com/repos/test/repo
- Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch 369090767/custom/workflows log .cfg -n1 b/gh-aw/pkg/actirev-parse --end-of-options--show-toplevel ache/go/1.25.8/x64/pkg/tool/linuremote 3237�� P9fV/X5IR65zjD34Fi-ugP9fV pkg/mod/github.com/modelcontextprotocol/go-sdk@v1.5.0/internal/m-ifaceassert ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -p crypto/internal/-1 -lang=go1.25 ache/go/1.25.8/x64/pkg/tool/linuremote.origin.url (http block)
- Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch --show-toplevel git /usr/bin/git (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Changeset

Type: patch
Description: Updated default CLI and MCP tool versions, including the MCP Gateway session timeout fix for long-running workflows.

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
chatgpt.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "chatgpt.com"

See Network Configuration for more information.

Generated by Changeset Generator for issue #29484 · ◷

✨ PR Review Safe Output Test - Run 25209689971

Note

🔒 Integrity filter blocked 1 item

The following item was blocked because it doesn't meet the GitHub integrity level.

chore: bump CLI/MCP tool versions (Claude Code 2.1.126, Copilot 1.0.39, Codex 0.128.0, Playwright MCP 0.0.72, MCP Gateway v0.3.3) #29484 pull_request_read: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".

To allow these resources, lower min-integrity in your GitHub frontmatter:

tools:
  github:
    min-integrity: approved  # merged | approved | unapproved | none

💥 [THE END] — Illustrated by Smoke Claude · ● 334.1K · ◷

github-actions · 2026-05-01T09:27:58Z

Hey @copilot-swe-agent 👋 — great to see work on keeping the CLI/MCP tool versions current (Claude Code 2.1.126, Copilot CLI 1.0.39, Codex 0.128.0, Playwright MCP 0.0.72, MCP Gateway v0.3.3)! A couple of things to address before this is ready for review:

Empty diff — the PR currently has 0 additions and 0 deletions. The actual change to pkg/constants/version_constants.go hasn't been committed yet.
Incomplete checklist — the make recompile and make agent-finish steps are still unchecked, meaning the workflow lock files haven't been regenerated and validation hasn't run.
No tests — once the version constants are updated, verify whether any test fixtures or snapshot files reference the old version strings and need updating.

If you'd like a hand completing this, assign the following prompt to your coding agent:

Complete the version bump in pkg/constants/version_constants.go:
- Claude Code: 2.1.119 → 2.1.126
- GitHub Copilot CLI: 1.0.36 → 1.0.39
- OpenAI Codex: 0.125.0 → 0.128.0
- Playwright MCP: 0.0.70 → 0.0.72
- MCP Gateway: v0.3.1 → v0.3.3

Then run `make recompile` to regenerate all workflow lock files, and `make agent-finish` to validate. Also check whether any test files reference the old version strings and update them accordingly. Commit all resulting changes.

Generated by Contribution Check · ● 1M · ◷

….39, Codex 0.128.0, Playwright MCP 0.0.72, MCP Gateway v0.3.3) Agent-Logs-Url: https://github.com/github/gh-aw/sessions/25b56e86-e02e-4243-92c3-8c8d76a09f23 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

github-actions · 2026-05-01T09:31:30Z

⚠️ Smoke Crush failed. Crush encountered unexpected challenges...

github-actions · 2026-05-01T09:31:34Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-05-01T09:31:37Z

🚀 Smoke OpenCode MISSION COMPLETE! OpenCode delivered. 🔥

github-actions · 2026-05-01T09:31:37Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-05-01T09:31:51Z

⚠️ Smoke Gemini failed. Gemini encountered unexpected challenges...

github-actions · 2026-05-01T09:32:35Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-05-01T09:34:44Z

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.53.0
jq	✅	1.7
yq	✅	4.52.5
curl	✅	8.5.0
gh	✅	2.89.0
node	✅	22.22.2
python3	✅	3.10.16 (PyPy 7.3.19)
go	✅	1.24.13
java	✅	10.0.201
dotnet	✅	10.0.201

Result: 12/12 tools available ✅

Overall Status: PASS

🔧 Tool validation by Agent Container Smoke Test · ● 165.1K · ◷

github-actions · 2026-05-01T09:39:14Z

Smoke Codex 25209690014: FAIL
PRs: #29488 [architecture] Update architecture diagram - 2026-05-01; #29479 fix(cache): persist meaningful state and add hit-history tracking in Smoke Codex
✅ GitHub MCP ✅ Serena ✅ Playwright ❌ Web Fetch ✅ File ✅ Bash ✅ Build ✅ Comment Memory ✅ Cache Memory
Run: https://github.com/github/gh-aw/actions/runs/25209690014

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
chatgpt.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "chatgpt.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex · ◷

github-actions · 2026-05-01T09:39:16Z

Comment Memory

Cold cache wakes at dawn
Build lights trace the quiet path
Green checks hold steady

Note

This comment is managed by comment memory.

It stores persistent context for this thread in the code block at the top of this comment.
Edit only the text inside the backtick fences; workflow metadata and the footer are regenerated automatically.

Learn more about comment memory

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
chatgpt.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "chatgpt.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex · ◷

github-actions · 2026-05-01T09:40:13Z

✅ 1. GitHub MCP
✅ 2. MCP Scripts GH CLI
✅ 3. Serena CLI
✅ 4. Playwright CLI
✅ 5. Web Fetch
✅ 6. File Writing
✅ 7. Bash Tool
✅ 8. Discussion Interaction
✅ 9. Build gh-aw
✅ 10. Upload Artifact
✅ 11. Discussion Creation
✅ 12. Workflow Dispatch
✅ 13. PR Review
⚠️ 14. Comment Memory (no files found)

Overall: ✅ PASS — PR #29484 by app/copilot-swe-agent | Assignees: @pelikhan, @Copilot

📰 BREAKING: Report filed by Smoke Copilot · ● 1.1M · ◷

github-actions · 2026-05-01T09:40:14Z

🎉 The smoke test agent was HERE! 🤖

I ran 14 tests on run §25209689966 and everything is working beautifully! MCP servers are humming, Playwright is browsing, Serena is analyzing, and gh-aw compiled without complaint.

The robots are doing great. Carry on! 🚀

📰 BREAKING: Report filed by Smoke Copilot · ● 1.1M · ◷

github-actions · 2026-05-01T09:40:16Z

Commit pushed: c47bce4

Generated by Changeset Generator

github-actions

Version bump PR bumping Copilot CLI to 1.0.39 and MCP Gateway to v0.3.3. Changes look consistent across all lock files. One note: the new MCP Gateway v0.3.3 entry lacks a pinned digest — worth adding for supply-chain security.

📰 BREAKING: Report filed by Smoke Copilot · ● 1.1M

github-actions · 2026-05-01T09:40:17Z

 #   - ghcr.io/github/gh-aw-firewall/api-proxy:0.25.29@sha256:d1219e4110684402aabbeb5a43858f26790c9d0be210581cf3f7a521bd2c87b6
 #   - ghcr.io/github/gh-aw-firewall/squid:0.25.29@sha256:8a71ad9e40454051672312917e51567abfb8251d7c294d086c48f63d84e4cb53
-#   - ghcr.io/github/gh-aw-mcpg:v0.3.1@sha256:287fad0236959f3b3d9936ea1ef8d5b4f135ef2a5f5789713495cbbef191e60c
+#   - ghcr.io/github/gh-aw-mcpg:v0.3.3


MCP Gateway bumped from v0.3.1 to v0.3.3 — note the new entry lacks a pinned digest. Consider pinning the digest for reproducibility and security.

github-actions · 2026-05-01T09:40:17Z

          GH_AW_INFO_MODEL: ${{ vars.GH_AW_MODEL_AGENT_COPILOT || 'claude-sonnet-4.6' }}
-          GH_AW_INFO_VERSION: "1.0.36"
-          GH_AW_INFO_AGENT_VERSION: "1.0.36"
+          GH_AW_INFO_VERSION: "1.0.39"


Version bump from 1.0.36 → 1.0.39 looks good. Both GH_AW_INFO_VERSION and GH_AW_INFO_AGENT_VERSION are updated consistently.

github-actions · 2026-05-01T09:40:45Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-05-01T09:43:41Z

Smoke Test Results — Run §25209689971

Core tests #1–#12: ✅✅✅✅✅✅✅✅✅❌✅✅
PR review tests #13–#19: ✅✅✅⚠️✅✅⚠️

Overall: PARTIAL — Test #10 (Agentic Workflows MCP) ❌, Test #16 (Resolve Thread) ⚠️ filtered, Test #19 (Close PR) ⚠️ skipped

Note

🔒 Integrity filter blocked 1 item

The following item was blocked because it doesn't meet the GitHub integrity level.

chore: bump CLI/MCP tool versions (Claude Code 2.1.126, Copilot 1.0.39, Codex 0.128.0, Playwright MCP 0.0.72, MCP Gateway v0.3.3) #29484 pull_request_read: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".

To allow these resources, lower min-integrity in your GitHub frontmatter:

tools:
  github:
    min-integrity: approved  # merged | approved | unapproved | none

💥 [THE END] — Illustrated by Smoke Claude · ● 334.1K · ◷

github-actions

💥 Automated smoke test review - all systems nominal!

Note

🔒 Integrity filter blocked 1 item

The following item was blocked because it doesn't meet the GitHub integrity level.

#29484 pull_request_read: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".

To allow these resources, lower min-integrity in your GitHub frontmatter:

tools:
  github:
    min-integrity: approved  # merged | approved | unapproved | none

💥 [THE END] — Illustrated by Smoke Claude · ● 334.1K

github-actions · 2026-05-01T09:43:42Z

 #   - ghcr.io/github/gh-aw-firewall/api-proxy:0.25.29@sha256:d1219e4110684402aabbeb5a43858f26790c9d0be210581cf3f7a521bd2c87b6
 #   - ghcr.io/github/gh-aw-firewall/squid:0.25.29@sha256:8a71ad9e40454051672312917e51567abfb8251d7c294d086c48f63d84e4cb53
-#   - ghcr.io/github/gh-aw-mcpg:v0.3.1@sha256:287fad0236959f3b3d9936ea1ef8d5b4f135ef2a5f5789713495cbbef191e60c
+#   - ghcr.io/github/gh-aw-mcpg:v0.3.3


🔍 Version bump noted: MCPG updated from v0.3.1 to v0.3.3. The digest pin has been removed in the new version — consider whether pinning by digest is important for reproducibility here, or if the tag is sufficient for this workflow.

github-actions · 2026-05-01T09:43:42Z

          GH_AW_INFO_MODEL: ${{ vars.GH_AW_MODEL_AGENT_COPILOT || 'claude-sonnet-4.6' }}
-          GH_AW_INFO_VERSION: "1.0.36"
-          GH_AW_INFO_AGENT_VERSION: "1.0.36"
+          GH_AW_INFO_VERSION: "1.0.39"


✅ Copilot CLI version updated to 1.0.39. Looks good — both GH_AW_INFO_VERSION and GH_AW_INFO_AGENT_VERSION are consistent with the bump.

Copilot

Pull request overview

Routine dependency maintenance PR that bumps default versions for several CLI/MCP tools (Claude Code, GitHub Copilot CLI, OpenAI Codex, Playwright MCP, and MCP Gateway), and regenerates workflow lockfiles and WASM compile golden snapshots to reflect the new defaults.

Changes:

Bumped default tool versions in pkg/constants/version_constants.go (5 constants).
Recompiled GitHub Actions workflow lockfiles (.github/workflows/*.lock.yml) to pick up the new versions.
Updated WASM golden snapshots under pkg/workflow/testdata/TestWasmGolden_CompileFixtures/*.golden.

Show a summary per file

File	Description
`pkg/constants/version_constants.go`	Updates the default version constants for the 5 tools being bumped.
`.github/workflows/test-workflow.lock.yml`	Regenerated lockfile content to reflect updated tool/container versions (including MCP Gateway).
`.github/workflows/*.lock.yml`	Broad lockfile regeneration to keep compiled workflows in sync with new defaults.
`pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden`	Golden snapshot updated for Copilot + MCP Gateway version changes.
`pkg/workflow/testdata/TestWasmGolden_CompileFixtures/smoke-copilot.golden`	Golden snapshot updated for Copilot + MCP Gateway version changes.
`pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden`	Golden snapshot updated for Copilot + MCP Gateway version changes.
`.changeset/patch-update-cli-mcp-tool-versions-2026-05-01.md`	Adds a patch changeset describing the version bumps.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 78/210 changed files
Comments generated: 1

Copilot · 2026-05-01T09:52:14Z

 # gh-aw-metadata: {"schema_version":"v3","frontmatter_hash":"c1289924ef5c241c6bf7aede9e9822e6fe5e48cd5d6242834bb75725a19e6fd8","strict":true,"agent_id":"copilot"}
-# gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GITHUB_TOKEN"],"actions":[{"repo":"actions/checkout","sha":"de0fac2e4500dabe0009e67214ff5f5447ce83dd","version":"v6.0.2"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"373c709c69115d41ff229c7e5df9f8788daa9553","version":"v9"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.25.29","digest":"sha256:e68f37e36962dcb3f3d1de680a49bc2302cefd001b941a7dc377155ec7ce42f4","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.25.29@sha256:e68f37e36962dcb3f3d1de680a49bc2302cefd001b941a7dc377155ec7ce42f4"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.29","digest":"sha256:d1219e4110684402aabbeb5a43858f26790c9d0be210581cf3f7a521bd2c87b6","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.29@sha256:d1219e4110684402aabbeb5a43858f26790c9d0be210581cf3f7a521bd2c87b6"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.25.29","digest":"sha256:8a71ad9e40454051672312917e51567abfb8251d7c294d086c48f63d84e4cb53","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.25.29@sha256:8a71ad9e40454051672312917e51567abfb8251d7c294d086c48f63d84e4cb53"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.3.1","digest":"sha256:287fad0236959f3b3d9936ea1ef8d5b4f135ef2a5f5789713495cbbef191e60c","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.3.1@sha256:287fad0236959f3b3d9936ea1ef8d5b4f135ef2a5f5789713495cbbef191e60c"},{"image":"ghcr.io/github/github-mcp-server:v1.0.3","digest":"sha256:2ac27ef03461ef2b877031b838a7d1fd7f12b12d4ace7796d8cad91446d55959","pinned_image":"ghcr.io/github/github-mcp-server:v1.0.3@sha256:2ac27ef03461ef2b877031b838a7d1fd7f12b12d4ace7796d8cad91446d55959"},{"image":"node:lts-alpine","digest":"sha256:d1b3b4da11eefd5941e7f0b9cf17783fc99d9c6fc34884a665f40a06dbdfc94f","pinned_image":"node:lts-alpine@sha256:d1b3b4da11eefd5941e7f0b9cf17783fc99d9c6fc34884a665f40a06dbdfc94f"}]}
+# gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GITHUB_TOKEN"],"actions":[{"repo":"actions/checkout","sha":"de0fac2e4500dabe0009e67214ff5f5447ce83dd","version":"v6.0.2"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"373c709c69115d41ff229c7e5df9f8788daa9553","version":"v9"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.25.29","digest":"sha256:e68f37e36962dcb3f3d1de680a49bc2302cefd001b941a7dc377155ec7ce42f4","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.25.29@sha256:e68f37e36962dcb3f3d1de680a49bc2302cefd001b941a7dc377155ec7ce42f4"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.29","digest":"sha256:d1219e4110684402aabbeb5a43858f26790c9d0be210581cf3f7a521bd2c87b6","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.29@sha256:d1219e4110684402aabbeb5a43858f26790c9d0be210581cf3f7a521bd2c87b6"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.25.29","digest":"sha256:8a71ad9e40454051672312917e51567abfb8251d7c294d086c48f63d84e4cb53","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.25.29@sha256:8a71ad9e40454051672312917e51567abfb8251d7c294d086c48f63d84e4cb53"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.3.3"},{"image":"ghcr.io/github/github-mcp-server:v1.0.3","digest":"sha256:2ac27ef03461ef2b877031b838a7d1fd7f12b12d4ace7796d8cad91446d55959","pinned_image":"ghcr.io/github/github-mcp-server:v1.0.3@sha256:2ac27ef03461ef2b877031b838a7d1fd7f12b12d4ace7796d8cad91446d55959"},{"image":"node:lts-alpine","digest":"sha256:d1b3b4da11eefd5941e7f0b9cf17783fc99d9c6fc34884a665f40a06dbdfc94f","pinned_image":"node:lts-alpine@sha256:d1b3b4da11eefd5941e7f0b9cf17783fc99d9c6fc34884a665f40a06dbdfc94f"}]}


The lock manifest now records the MCP Gateway container as an unpinned tag (ghcr.io/github/gh-aw-mcpg:v0.3.3) and drops the previously recorded digest/pinned_image. This weakens reproducibility/auditability for the workflow and makes the “lock” file sensitive to tag retargeting. Update the container pin source (e.g., container pins in .github/aw/actions-lock.json and/or embedded container pins) so v0.3.3 resolves to an immutable @sha256 digest, then recompile the lock files to include digest/pinned_image again.

Initial plan

a77c4ab

Copilot AI assigned Copilot and pelikhan May 1, 2026

Copilot started work on behalf of pelikhan May 1, 2026 09:19 View session

Copilot AI linked an issue May 1, 2026 that may be closed by this pull request

[ca] chore: update CLI/MCP tool versions (Claude Code 2.1.126, Copilot 1.0.39, Codex 0.128.0, Playwright MCP 0.0.72, MCP Gateway v0.3 [Content truncated due to length] #29478

Closed

github-actions Bot mentioned this pull request May 1, 2026

[Contribution Check Report] Contribution Check — 2026-05-01 #29413

Closed

Copilot AI changed the title ~~[WIP] Update CLI/MCP tool versions including Claude Code 2.1.126~~ chore: bump CLI/MCP tool versions (Claude Code 2.1.126, Copilot 1.0.39, Codex 0.128.0, Playwright MCP 0.0.72, MCP Gateway v0.3.3) May 1, 2026

Copilot finished work on behalf of pelikhan May 1, 2026 09:30

Copilot AI requested a review from pelikhan May 1, 2026 09:30

pelikhan added the smoke label May 1, 2026

github-actions Bot removed the smoke label May 1, 2026

github-actions Bot mentioned this pull request May 1, 2026

Smoke Test: Copilot - 25209689966 #29493

Closed

Add changeset

c47bce4

github-actions Bot added the smoke-copilot label May 1, 2026

github-actions Bot reviewed May 1, 2026

View reviewed changes

github-actions Bot mentioned this pull request May 1, 2026

Smoke Test: Claude - 25209689971 #29495

Closed

github-actions Bot added the smoke-claude label May 1, 2026

github-actions Bot reviewed May 1, 2026

View reviewed changes

pelikhan marked this pull request as ready for review May 1, 2026 09:48

Copilot AI review requested due to automatic review settings May 1, 2026 09:48

pelikhan merged commit ca9f8a0 into main May 1, 2026
19 checks passed

pelikhan deleted the copilot/update-cli-mcp-tool-versions branch May 1, 2026 09:48

Copilot started reviewing on behalf of pelikhan May 1, 2026 09:49 View session

Copilot AI reviewed May 1, 2026

View reviewed changes

github-actions Bot mentioned this pull request May 1, 2026

[aw] No-Op Runs #29134

Open

Conversation

Copilot AI commented May 1, 2026 • edited by github-actions Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version changes

Files changed

I tried to connect to the following addresses, but was blocked by firewall rules:

Changeset

Uh oh!

github-actions Bot commented May 1, 2026

Uh oh!

github-actions Bot commented May 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented May 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented May 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented May 1, 2026

Uh oh!

github-actions Bot commented May 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented May 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented May 1, 2026

Agent Container Tool Check

Uh oh!

github-actions Bot commented May 1, 2026

Uh oh!

github-actions Bot commented May 1, 2026

Comment Memory

Uh oh!

github-actions Bot commented May 1, 2026

Uh oh!

github-actions Bot commented May 1, 2026

Uh oh!

github-actions Bot commented May 1, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot May 1, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot May 1, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented May 1, 2026

Uh oh!

github-actions Bot commented May 1, 2026

Smoke Test Results — Run §25209689971

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot May 1, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot May 1, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

Copilot AI May 1, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

Copilot AI commented May 1, 2026 •

edited by github-actions Bot

Loading

github-actions Bot commented May 1, 2026 •

edited

Loading

github-actions Bot commented May 1, 2026 •

edited

Loading

github-actions Bot commented May 1, 2026 •

edited

Loading

github-actions Bot commented May 1, 2026 •

edited

Loading

github-actions Bot commented May 1, 2026 •

edited

Loading